The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0188 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-46871:
      An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This     vulnerability affects Firefox < 108.

      CVE-2022-46877:
      By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting     in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 108.

      CVE-2023-23598:
      Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain     MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to     <code>DataTransfer.setData</code>. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and     Firefox ESR < 102.7.

      CVE-2023-23599:
      When copying a network request from the developer tools panel as a curl command the output was not being     properly sanitized and could allow arbitrary commands to be hidden within. This vulnerability affects     Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

      CVE-2023-23601:
      Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which     could lead to website spoofing attacks. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and     Firefox ESR < 102.7.

      CVE-2023-23602:
      A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy     connect-src header to be ignored. This could lead to connections to restricted origins from inside     WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

      CVE-2023-23603:
      Regular expressions used to filter out forbidden properties and values from style directives in calls to     <code>console.log</code> weren't accounting for external URLs. Data could then be potentially exfiltrated     from the browser. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.

      CVE-2023-23605:
      Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and     Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox <     109, Thunderbird < 102.7, and Firefox ESR < 102.7.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble     scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service. (CVE-2023-46871)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - MP4Box の GPAC バージョン 2.3-DEV-rev602-ged8424300-master には、NewSFDouble Scenegraph/vrml_tools.c:300 のメモリリークが含まれています。この脆弱性により、サービス拒否が引き起こされる可能性があります。 （CVE-2023-46871）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - MP4Box 中的 GPAC 2.3-DEV-rev602-ged8424300-master 版在 NewSFDouble Scenegraph/vrml_tools.c:300 中含有一個記憶體洩漏問題。此弱點可能導致拒絕服務。 (CVE-2023-46871)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - MP4Box 中的 GPAC 版本 2.3-DEV-rev602-ged8424300-master 在 NewSFDouble scenegraph/vrml_tools.c:300 中存在内存泄漏。此漏洞可能导致拒绝服务。 (CVE-2023-46871)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
239158	TencentOS Server 3: firefox (TSSA-2023:0188)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
226160	Linux Distros Unpatched Vulnerability : CVE-2023-46871	Nessus	Misc.	2025/3/5	2025/9/2	medium
226160	Linux Distros のパッチ未適用の脆弱性: CVE-2023-46871	Nessus	Misc.	2025/3/5	2025/9/2	medium
226160	Linux Distros 未修補弱點：CVE-2023-46871	Nessus	Misc.	2025/3/5	2025/9/2	medium
226160	Linux Distros 未修补的漏洞: CVE-2023-46871	Nessus	Misc.	2025/3/5	2025/9/2	medium

检测

插件搜索

high

medium

medium

medium

medium